to-tickets
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the GitHub CLI (
gh) and GitLab CLI (glab) to automate issue creation. It also references a vendor-specific setup command,setup-krit-skills, which is expected within the vendor's own ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes specification files to generate tickets, creating a surface where instructions embedded in those documents could influence the agent's behavior during the task breakdown.
- Ingestion points: The agent reads specification data from
docs/specs/<slug>.mdand project context fromCONTEXT.md. - Boundary markers: No delimiters or safety instructions are used to separate user data from instructions when reading the specification files.
- Capability inventory: The skill is capable of executing shell commands (creating remote issues) and performing file writes to the local repository.
- Sanitization: The contents of the specification files are not sanitized or validated before being used to generate ticket bodies or titles.
Audit Metadata